Data Matters

MARCH 28, 2022

Department of Health and Human Service’s Office for Civil Rights (“OCR”) issued industry guidance for Health Insurance Portability and Accountability Act (“HIPAA”) regulated entities to take preventative steps to protect against some of the more common, and often successful, cyber-attack techniques. On March 17, 2022, the U.S.

Cybersecurity 86

Cybersecurity Privacy Insurance Risk 86

Data Matters

DECEMBER 15, 2020

The proposed changes are designed to lead to increased data access, sharing, and portability and to further HHS’s emphasis on patients’ right of information access, which has been highlighted through a series of enforcement actions in 2020. 1] Key provision of the Proposed Rule include: Individual Right of Access.

Privacy 66

Privacy Access Insurance Communications 66

Hunton Privacy

JANUARY 17, 2013

The Final Rule comes two and a half years after the proposed rule was published in July 2010.

Privacy 40

Privacy Security Insurance Marketing 40

Hunton Privacy

JULY 8, 2010

On July 8, 2010, the Department of Health and Human Services (“HHS”) issued a notice of proposed rulemaking to modify the Privacy, Security and Enforcement Rules promulgated pursuant to the Health Insurance Portability and Accountability Act of 1996.

Privacy 40

Privacy Security Marketing Insurance 40

Hunton Privacy

AUGUST 5, 2009

The Missouri law’s noteworthy provisions include a broad definition of personal information that encompasses medical and health insurance information and a requirement to notify consumer reporting agencies and the state attorney general if more than 1,000 consumers are being notified of a security breach.

Security 40

Security Data breaches Insurance Data Privacy 40

Data Matters

MAY 6, 2022

Digital health companies should take note of new data privacy and security developments under the Health Insurance Portability and Accountability Act (HIPAA) that can affect product planning and customer negotiations. What is Digital Health? RFI Regarding Recognized Security Practices.

Risk 86

Risk Cybersecurity Insurance Authentication 86

Hunton Privacy

JANUARY 25, 2013

Notably, the Omnibus Rule adds “subcontractors” to the definition of “business associate” to provide that subcontractors that perform functions for or provide services to a business associate are also deemed business associates when they create, receive, maintain or transmit protected health information (“PHI”) on behalf of the business associate.

Compliance 45

Compliance Communications Privacy Marketing 45